dsh-plugin-permission-popup
Corner approval popup: answer pending permission requests from any session while the agent window is away
456 results
Corner approval popup: answer pending permission requests from any session while the agent window is away
Offline content-addressed proof for supplied DSH workflow duty separation
Container-isolated backend for the DeepSeek Harness code-execution seam: Code Mode programs run in a fresh container with no network, a read-only rootfs, and kernel-enforced memory, CPU, and pid ceilings
A task-contract and completion-certification layer for DeepSeek Harness.
Automatic review of sandbox escalation requests for DeepSeek Harness, plus an /approve slash command for manually approving auto-denied actions (Codex Guardian-style)
SuperPowers for the DeepSeek Harness: portable Superpowers skills, automatic bootstrap, and DSH-native Windows sandbox compatibility.
Workspace tools for DeepSeek Harness: per-workspace default Agent preset and permission preset for new sessions, using only official extension points (no DSH patches required).
HashiCorp Vault backend for the DeepSeek Harness credential seam: central secrets, AppRole machine auth, rotation without restart, and no long-lived provider key on the agent host
Deterministic, one-way PII anonymizer at the start of the DeepSeek Harness agent loop
Danger Reflection (危险反思): a DeepSeek Harness permission preset that replaces the human approval prompt for sandbox escalation with a same-model review that replays the whole conversation.
Audit a catalog plugin, approve the change plan, apply it, then install.
扫 GitHub Actions 工作流,找出可被利用的配置 —— 供应链攻击的主要入口
扫出代码和配置里的身份证、银行卡、手机号 —— 带校验位验证,不误报
检查依赖树的投毒与风险面:装包即执行的脚本、过宽版本、非 registry 来源
DSH bundle adding a copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box's copy while the real disk is untouched.
DSH plugin: file-change diff bar with keep/undo summary, and a dangerous-command approval gate with red highlighting for bash/pwsh
Plan / Build mode switcher for DeepSeek Harness: a composer dropdown beside the permission control, plus a default-mode setting for new sessions.
查代码与配置里的境外数据出口:境外端点、个人信息外发、缺安全评估说明
查权限过宽:容器跑 root、IAM 通配、CORS 全开、令牌申请 admin —— 权限过宽是入侵的放大器
DeepSeek Harness plugin: server inventory, health alerts, read-only security baseline.
Context Mode DSH插件:内置ctx沙箱工具与 Hook 路由拦截,节省会话上下文空间
Unofficial DeepSeek Harness plugin that triages sandbox-escalation approvals: hard rules plus a second-model review. Stage 2: observe-only; every prompt still reaches you.
Adversary review gate for DeepSeek Harness: an independent small model reviews destructive tool calls before they run, and reports every verdict.
Approval-free writes into whitelisted directories: wraps ctx.fs.checkedTarget for write/edit, auto-approves bash escalations that touch whitelisted paths, with a Settings GUI. 白名单目录写入免审批(write/edit + bash),设置页可视化调整。